summaryrefslogtreecommitdiff
path: root/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
diff options
context:
space:
mode:
Diffstat (limited to 'oauthlib/oauth2/rfc6749/grant_types/authorization_code.py')
-rw-r--r--oauthlib/oauth2/rfc6749/grant_types/authorization_code.py18
1 files changed, 0 insertions, 18 deletions
diff --git a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
index b799823..858855a 100644
--- a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
+++ b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
@@ -10,7 +10,6 @@ import logging
from oauthlib import common
from .. import errors
-from ..utils import is_secure_transport
from .base import GrantTypeBase
log = logging.getLogger(__name__)
@@ -547,20 +546,3 @@ class AuthorizationCodeGrant(GrantTypeBase):
if challenge_method in self._code_challenge_methods:
return self._code_challenge_methods[challenge_method](verifier, challenge)
raise NotImplementedError('Unknown challenge_method %s' % challenge_method)
-
- def _create_cors_headers(self, request):
- """If CORS is allowed, create the appropriate headers."""
- if 'origin' not in request.headers:
- return {}
-
- origin = request.headers['origin']
- if not is_secure_transport(origin):
- log.debug('Origin "%s" is not HTTPS, CORS not allowed.', origin)
- return {}
- elif not self.request_validator.is_origin_allowed(
- request.client_id, origin, request):
- log.debug('Invalid origin "%s", CORS not allowed.', origin)
- return {}
- else:
- log.debug('Valid origin "%s", injecting CORS headers.', origin)
- return {'Access-Control-Allow-Origin': origin}